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, A continuous variable ping-pong scheme, which is utilized to generate deterministically private 

, key, is proposed. The proposed scheme is implemented physically by using Gaussian-modulated 

, squeezed states. The deterministic way, i.e., no basis reconciliation between two parties, leads a 

^ two-times efficiency comparing to the standard quantum key distribution schemes. Especially, the 

o ■ 



separate control mode does not need in the proposed scheme so that it is simpler and more available 
than previous ping-pong schemes. The attacker may be detected easily through the fidelity of the 
transmitted signal, and may not be successful in the beam splitter attack strategy. 

PACS numbers: 03.67.Dd, 03.67.Hk 

The standard quantum key distribution (QKD) scheme ^ provides a novel way of generation and distribution of 
secret key. Its security is guaranteed by the law of quantum mechanics HQS 

. The intrinsical basis reconcihation, 

which is significant in guaranteeing the security, means that the standard QKD is nondctcrministic. Unfortunately, 



o , 

, the nondctcrministic property results in loss of many qubits, consequently, the efficiency is very low. To improve 
Oh! the efficiency, several deterministic QKD schemes were proposed recently by using technique of ping-pong of photon 



^ ' between two parties These schemes are implemented in discrete variable. While the final key is gener- 

^ atcd through a message-mode and the security is guaranteed by a separate control-mode. However, the separate 



control-mode in the previous ping-pong schemes leads a higher communication complexity and a more complicated 



- experimental realization. In addition, discrete variable is not easy in generation as well as detection so that continuous 
^ ■ variable (CV) becomes a favored candidate in the quantum cryptography I^, Q, ll|, l3, H, QjQ- 



In this letter, a continuous variable ping-pong scheme, which is implemented by using the Gaussian-modulated 
squeezed states, is firstly proposed. Since the proposed scheme does not need the basis reconciliation when the 
communicators, i.e., Alice and Bob, exchange the key information, its efficiency is two times of the standard CV QKD 
schemes. Particularly, the separate control-mode, which is necessary in the discrete- variable (DV) ping-pong schemes, 
can be omitted. This characteristic makes the proposed scheme be feasible in experimental realization. In addition, 
the channel capacity is higher than that of the DV ping-pong schemes. The security analysis based on Shannon 
information theory shows clearly the security against the beam splitter attack strategy. In a lossy channel, when the 
transmission is larger than 0.728 the security can be warranted. 

The proposed scheme, which is sketched in Fig[Tl executes the following. Step 1, Bob operates an initial vacuum 
state |0) with either operator V = D{a)S(r) or 'P± = D{ia)S{—r) which are regarded as a pair of bases, where S{r) 
is the squeezing operator and r is the squeezed factor, D(a) is a displacement operator which is employed to add 
noise, and a is a real number. Step 2, Bob sends the generated state to Alice through a public quantum channel. 
Step 3, having operated the received state by a proper displacement operator D{a' = x + ix), Alice returns the state 
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to Bob, where x is a random number which is drawn from Gaussian probabihty distribution. Step 4, if the base V is 
employed in the step 1, Bob apphes D{—a) on the returned mode, and measures Xi. Otherwise. Bob apphes D{~ia) 
on the returned mode, and measures X2. The canonical quadratures Xi and X2 are defined as Xi = ^{a + a^) 
and X2 — 5|(a — a^). Step 5, Alice randomly selects some x values, and then sends the chosen values and their 
corresponding time slots to Bob through a public classic channel. Step 6, after has received Alice's values. Bob 
calculates statistically the fidelity by using the received values and his corresponding measured results. Then Bob 
detects whether Eve is absent or not by using the calculated fidelity. 




FIG. 1: Scheme of the deterministic quantum key distribution using Gaussian-modulated squeezed states. The Arabian numbers 
denote the modes in Heisenburg picture. 

We explain briefly above protocol in the physical way. Bob's operation in step 1 yields a squeezed coherent state 
either \a,r) ~ D{a)S{r)\0) or \ia,^r) = D{ia)S{~r)\0) . For simplicity, we only illuminate the evolvement of the 
state |a, r) thereafter since the state \ia, — r) may be treated with in a same way. Since the initial vacuum state |0) is a 
Gaussian state, the canonical quadratures Xl and X2 follow the Gaussian probability distribution, i.e., Xl ^ N{0, j) 
and X2 ^ N{0, i). where Xl{k — 1,2) represents Xk(k ~ 1,2) of the mode a^, F ~ iV(/x, cr^) denotes that random 
variable F follows Gaussian probability distribution with the average value ^ and the variance . Choosing a random 
disturbance a with distribution A - N{0,J:'^), one has Xf - N{0,i:'^ + ^e^^r) g^^-^^ ~ iV(0, ^e^''). Obviously, 
when the following condition is satisfied, i.e., 

+ Je-- = ie-, (1) 

Xf and Ar| follows the same probability distribution. Subsequently, Eve cannot distinguish the output states \a,r) 
and \ia, — r) whatever the statistics Eve accumulates. Making use of the operator D(a' = x + ix) and the distribution 
X ~ N{0, E'^), one may easily obtain Xf - N{0, + ie'^'' + s'^) and X| - iV(0, ^e^'' + s'^). After has received 
the state encoded by Alice, Bob removes the added quantum noise so that he can decode Alice's message. This 
operation gives the mode 07 with Xj ^ N{0, je^'^^ + E ) and ATj ^ N{Q, ^e^'' + E ). Finally, Bob measures X^ on 
the received state to decode Alice's message. 

Now we move on the security analysis. Suppose Eve splits the forward and backward beams as depicted in FigUl 
then she coherently measures the intercepted beams to obtain the maximal information. To show the security of the 
proposed scheme against above attack strategy, i.e., the general beam splitter attack strategy, we adopt the following 



criterion which is used prevalently for QKD scheme [l|, [l^ , 

AI^I{a,p)^Ir,^ax{a,e)>0, (2) 
where I{a,P) is the mutual information between Alice and Bob, and Imaxio:,e) is the maximal mutual information 



17[, the channel capacity of the additive white 



between Alice and Eve. According to Shannon information theory 
Gaussian noise (AWGN) channel is given by, 

/=ilog2(l+7), (3) 

where j ~ Ps/ Pn is the signal-noise ratio, Ps and P/v arc the variances of the signal and noise probability distributions 
respectively. If the signal follows the Gaussian distribution, and the channel is an AWGN channel, the channel 
capacity is the mutual information of the communication parties. In the foUowings, first we calculate the probability 
distributions of Xi and X2 in all modes as depicted in Fig.l, then calculate /(a, /3) and Imax{<^, e) according to Eg. ([3]) . 
A beam splitter (BS) is always employed to split the laser beam. According to Fig[l] inputs of the BSi are given 

by, 

Xf^e-^Xl+A, Xl = e^Xl (4) 



and two output modes of BSi are, 



xt ^ Vmx'i + v^r^ixr\ 



xf = Vmxr' - V^^iXl 

xl = Vmxr' - s/T^iXl (5) 

where 771 is the transmittance coefHcient of BSi. Consider Alice's operation of applying the displacement operator 
D(a = X + ix) on the mode 0,4, the inputs of the BS2 arc given by, 

Xl = Xt + X, Xl^Xt + X. (6) 

Similarly, the outputs of the BS2 are obtained as following, 



xt - V^xf + v/T^xr^', 



xt = Vv^xl + ^/T^2xr\ 



xi = ^xr' - v^^xi 



xl = Vmxr' - VT^xl , (7) 

where 772 is the transmittance coefficient of BS2- Applying the operator D(—a) on mode oe yields, 

Xl = X'^-A, Xl = Xl (8) 

Combining Eqs.dl]) ^ ^ gives. 



xl = Vm{Vme''xl + ./T^ixr' + x) + ./T^2xr', (9) 



where the random variables (fc = 1,2, j = vacl,vac2) follow the Gaussian probability distributions, i.e. 
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Making use of Eqs.(IT|), © and (fTU]) . the variances of and are obtained, 



X^.~iV(0,-). (10) 



+r?2S'2 + i[(l-,y2) + (l- 7^1)7,2], (11) 

Using the first expression in Eg. ljlip gives the signal- noise ratio, 

Icp = ^. (12) 

where M = yyaS'^ and N = ir^ijyse-^'- + i(i - yfqTm)'^ {e^'' - e"'^") + i[(l - 772) + (1 - 7;i)?72]- Thus the mutual 
information between Alice and Bob is, 

/(a,/?) = ilog2(l + 7a/3). (13) 

When 771 = 772 = 1, above equation can be written as C[a,f3) = ilog2(l + |?3f), where C(a,/3) is the mutual 
information between Alice and Bob without eavesdropping. Obviously. C{a,(3) increases with r and E ^. Actually, 
C(a, (3) is the channel capacity of the communication between Alice and Bob without eavesdropping. As an example, 
one may easily obtain C{a, (3) = 8.6 bits when r = 3, E' = 10, which is apparently larger than that of the DV quantum 
communication scheme. 

The maximal information /,„aa;(Q?,e) may be obtained by Eve through measuring both as and ag. Assume that 
Eve is an evil quantum physicist who is able to build all devices that are allowed by the laws of quantum mechanics. 
Then Eve may build an advice to measure X^^'^ and ATf'^'^ of the mode ciEve ^ 0.9 ^ ka^, where fc is a parameter to 
be optimized. Using the expressions of X^ in Eq.(l5]) and X^ in Eq.([7]), X^^'^ and Xf""^ may be easily obtained, 



VT^x - W(i-vi)ii-V2) + k^]xr' + Vmxr\ (14) 



[v/(i-7yi)(i-772) + fcVm]^2""'' + Vmxr^ 

Combining Eq. ([T]) and Eq. (fT4|) , one may find that the random variables X^^^ and A'|''"^ follow the same probability 
distribution. Accordingly, Eve obtains the same signal-noise ratios in X^^^ and Xf'"'^, i.e., 'yaexf^' — latxi^^'^ = 
4(1 - r]2)T,''^/^ + V, where /i = (y^77i(l - 772) - fc^l - m)^e'^'' and i' = (^(1 - 77i)(l - 772) + fc^ATi)^ + '^2- When 



fc = (e^*" + 1)^/771(1 — 7/i)(l — 772)/(e^'"(l — 771) + 771), Eve obtains the maximal mutual information, 

Imaxia,e) = /xi(a,e) = /x2(a, e)- (15) 

Substituting Eqs.((T3]) and into Eq.(2) gives the secret information rate A/. Fig[2] shows the properties of A7 
changing with 771, 772. One may see that A/ increases with increasing of 771, 772. In addition. A/ may be negative when 
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rji and 772 are small, which implicates that Eve may obtain more useful information by choosing two proper beam 
splitters than Bob. Fortunately, this attack strategy does not influence the security of the proposed scheme since Eve 
may be detected easily in this situation. 




FIG. 2: Property of A7 (unit:bit) changing with ?7i,7?2. The employed parameters are r = 3 and E ^ = 100 



Now we investigate how to detect Eve. A separate control-mode is always employed to detect the eavesdropping 
in the previous ping-pong schemes. However, this approach does not benefit the efficiency of the scheme. Here we 
propose a new approach which is more efficient than the separate control-mode approach. After finished the step 4, 
Alice tells Bob some values of random variable X and the corresponding time slots through a classical public channel. 
After received Alice's results, Bob calculates the fidelity. 



F 



("in I Pout lain) = 7I'Q(ai„), 



(16) 



where |ai„) — |0), Pout — \o:out){'^out\, E^nd \aout) — S{—r)D{~a )|^') with the quantum state j'l') in mode dj. 
The Q function for a squeezed state is defined as that in 18]. In an ideal (no- loss) quantum channel, the fidelity 
satisfies F = 1 without eavesdropping and F < 1 with eavesdropping. Therefore the fidelity F can be employed as 
an important parameter for Eve detection. Making use of the state \aout) in the Heisenburg picture and Eq.®, one 
obtains. 



x:s 



-^"-{VmiVmie-^'xl + A) + ^/T^^xr' +x] + ^/T^xr' ^A-x} 
--''[VmiVme'xl + yi^xr^i + x) + ^/l~^xr^ - x]. 



(17) 



Using Eqs.(lO) and (17), the variances of X™* and are given by. 



((Axr*)2) 



((Axr*)') 



+ iVm- + ^[(1 - 772) + (1 - vi)v2]}, 



2W2 



(V^2 - l)^S 



1 , 



+ -[(1- 772) + (1-^1)^2]}. 



The fidelity F is obtained as the following form, 

F = 



^(4((AXr*)2) + 1)(4((AX°"*)2) + 1) 



(18) 



(19) 



Substituting Ea. ([T5)l into Eq.(19), one may calculate the fidelity. Numerical solutions of Eq.(19) are depicted in FiglJl 
With rji and 772 decreasing the fidelity F decreases rapidly. Accordingly, any eavesdropping can be detected by Alice 
and Bob by using the fidelity F. 




FIG. 3: The dependence of fidelity F on r;i and 772, the chosen parameters are r — 3 and E 2 = 100 



The relationship between Almin and F is useful for detecting eavesdropping. The analytical expression for these 
variables is very prolix, so only the numerical solutions, which are plotted in FiglH are presented. If Eve doesn't exist, 
i.e., F = I, one may easily obtain the secret information rate Almin = I{ot,l3) = 8.6 bits. However, the condition 
of = 1 is too strict in practices. Fortunately, there is an important value Fc which may be obtained from Fig|4j 
i.e., Fc — 0.02. When F > F^ one has AI,ni„ > 0, which means Eve's eavesdropping does not influence the security 
of the final key. While F < F^. there is a negative information rate. In this case, Alice and Bob has to discard the 
communication. 



FIG. 4: The relationship between A/min (unit:bit) and F. The parameters are r = 3 and S 



'2 



100. 



When the line has a transmission 77 over the separation between Alice and Bob, the best attack strategy for Eve is to 
take a fraction 1 — r; of the beam and then send the fraction 77 forward through her own lossless line. In this situation, 
the eavesdropping can not be detected but the secure QKD is possible under a proper condition. Eve's maximum 
information is given by Eq. fTS)) with 771 = 772 = ?7. Numerical calculation shows A/ > when 77 > 0.728. Accordingly, 
Alice and Bob can perform a deterministic QKD with security when the line has a transmission ?/ > 0.728. One may 
recall that the coherent state quantum key distribution beats the loss limit 77 — 0.5 by applying technique of reverse 
reconciliation [l^ or postselection [l^ . Actually, with the technique of the reverse reconciliation or the postselection, 
the loss limit 77 = 0.728 is anticipated to be beaten in the proposed scheme [2^. 
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In conclusion, a deterministic QKD scheme using Gaussian-modulated squeezed states is proposed. The character- 
istic of no basis reconciliation yields a two-times efficiency than that of the CV standard QKD schemes. Especially, 
the separate control-mode does not need in the proposed scheme so that the scheme is more feasible in experimental 
realization. The fidelity is employed to detect the eavesdropper and resist the beam splitter attack strategy. In a 
lossy channel, a secure scheme requires the transmission of 7y > 0.728. 
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